Browse CVEs

HIGH 7.8 CVE-2017-7493 Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control… Debian Linux after 2.9.1 Fix from $1,9502017-05-17 HIGH 7.8 CVE-2017-8849 smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service. Debian Linux after 2.0.0 Fix from $1,9502017-05-17 HIGH 7.8 CVE-2017-8844 The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (heap-based buffer overflow and a… Debian Linux Patch available Fix from $1,9502017-05-08 MEDIUM 5.5 CVE-2017-8846 The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and applicati… Debian Linux Patch available Fix from $1,6002017-05-08 HIGH 7.8 CVE-2017-8829 Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a review of a source package with … Lintian after 2.5.50.3 Fix from $1,9502017-05-08 CRITICAL 9.8 CVE-2016-10243EPSS 7% TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file. Debian Linux Patch available Fix from $2,3002017-05-02 HIGH 7.5 CVE-2017-7483 Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible i… Debian Linux Patch available Fix from $1,9502017-05-02 MEDIUM 6.5 CVE-2017-8086 Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a deni… Debian Linux after 2.8.1 Fix from $1,6002017-05-02 MEDIUM 6.5 CVE-2017-8112 hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumpt… Debian Linux after 2.9.1 Fix from $1,6002017-05-02 HIGH 8.8 CVE-2017-8361 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application cr… Debian Linux Patch available Fix from $1,9502017-04-30 MEDIUM 6.5 CVE-2017-8362 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash… Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8363 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and ap… Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8365 The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) … Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8343 In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8344 In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8345 In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8346 In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8347 In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8348 In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8349 In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8350 In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8351 In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8352 In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8353 In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8354 In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8355 In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8356 In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8357 In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file. Debian Linux Patch available Fix from $1,6002017-04-30 HIGH 7.8 CVE-2017-8291 KEVEPSS 96% Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" … Debian Linux 9.21+ Fix from $1,9502017-04-27 CRITICAL 9.8 CVE-2017-8283 dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hu… Dpkg Patch available Fix from $2,3002017-04-26